Gains: Getchu.com member system breached; passwords and addresses may have leaked
The Getchu.com member management system was accessed without authorization and some member data leaked, possibly including passwords, names and addresses. No count was given.
Disclosed
2026-11-04
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Gains detected unauthorized access to the system holding Getchu.com member data at about 17:30 and cut off the outside traffic. [1]
It finished blocking the access and checking the system at about 01:00, and the same day disclosed that some member data had leaked. [1]
Impact
Members registered by about 17:30 on 28 October are affected. The fields that may have leaked are member ID, email address, password, name, postcode, address and phone number, depending on what each member registered. No count was given. Card data was not on this system, and DL.Getchu.com and Gyutto.com were not affected. [1] [2]
Gains reset all member passwords and requires a new one at the next login, and asked members to change the same password on other services. It has not disclosed how the attacker got in. [1] [2]
Timeline
- Detected 2026-10-28
- Disclosed 2026-11-04
- 7 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Services hit
Organizations involved
[Breached][Critical]Tokyo, ChiyodaWholesale and retail trade
Gains
Sources
- [1][Official]当社サイトへの不正アクセスによるお客様情報流出のお詫びとお知らせGains · 2026-11-04
- [2][News]ECサイト「Getchu.com」、サイバー攻撃で会員情報の一部流出を確認 ID・パスワード・住所も対象の可能性、再設定を要請Security Measures Lab · 2026-11-05